[18150] in bugtraq
sshmitm, webmitm
daemon@ATHENA.MIT.EDU (Dug Song)
Mon Dec 18 22:28:26 2000
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Message-Id: <20001218101802.J26453@naughty.monkey.org>
Date: Mon, 18 Dec 2000 10:18:02 -0500
Reply-To: Dug Song <dugsong@MONKEY.ORG>
From: Dug Song <dugsong@MONKEY.ORG>
To: BUGTRAQ@SECURITYFOCUS.COM
sshmitm and webmitm have been released as part of the new dsniff-2.3
package, available at:
http://www.monkey.org/~dugsong/dsniff/
these tools perform simple active monkey-in-the-middle attacks against
SSH and HTTPS, exploiting weak bindings in ad-hoc PKI.
that is all.
-d.
---
http://www.monkey.org/~dugsong/